| 📝 Diagnostic Setting captures Administrative, Alert, Policy, and Security categories 🟢 | 1 | 🟢 x6 |
| 📝 Diagnostic Setting exists for Subscription Activity Logs 🟢 | | 🟢 x3 |
| 📝 Diagnostic Setting for Azure AppService HTTP logs is not enabled 🟢 | | 🟢 x3 |
| 📝 Diagnostic Setting for Azure Key Vault is not enabled 🟢 | | 🟢 x3 |
| 📝 Diagnostic Setting is not enabled for all services that support it 🟢 | | 🟢 x3 |
| 📝 Diagnostic Setting Logs export to Storage Account not encrypted with Customer-managed key 🟢 | 1 | 🟢 x6 |